$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5912c16-5a23-3e46-b568-53dd3d84728c.roa File: e5912c16-5a23-3e46-b568-53dd3d84728c.roa (raw, json) Hash identifier: YA25XT8a1w0c7EtychrRzmg6eAf/8zQ+RfDLfxDFGbI= Subject key identifier: 46:BC:18:99:1C:83:9A:33:87:D0:1C:71:D0:B2:56:97:2C:47:47:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDF90688EE1847BF9B413C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5912c16-5a23-3e46-b568-53dd3d84728c.roa Signing time: Fri 15 Aug 2025 17:56:10 +0000 ROA not before: Fri 15 Aug 2025 17:56:10 +0000 ROA not after: Thu 13 Nov 2025 18:56:10 +0000 asID: 31898 IP address blocks: 129.154.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:f9:06:88:ee:18:47:bf:9b:41:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:56:10 2025 GMT Not After : Nov 13 18:56:10 2025 GMT Subject: CN=1857c0de-4ea3-4e02-8832-de088619d5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:64:0b:4e:07:ef:3f:b0:d0:44:14:cb:eb: 30:52:38:a9:34:49:79:f0:77:f2:f4:17:9d:28:c5: a6:80:69:1d:ac:7c:7f:32:43:1a:9f:41:ee:de:66: 3b:88:f3:dd:5e:52:2b:6b:c3:51:2c:98:01:cd:30: 91:ac:c0:4d:44:e7:f4:32:dc:dc:65:d3:65:59:9c: 96:7d:a1:8d:18:12:16:31:d4:98:52:f8:4d:da:bd: 64:5b:50:85:2e:e6:5f:4e:ce:62:3f:31:34:e1:ad: b8:be:92:21:bd:e1:11:ca:4a:d2:78:0c:0d:d7:65: 7e:e6:ab:8d:ec:ab:62:81:40:94:4d:8b:cb:6c:3d: e9:0b:23:17:22:99:ad:41:04:f2:ac:a2:88:c9:e0: 47:31:e0:9b:57:83:ef:7b:c8:62:3d:bd:1e:5e:1f: 6a:fd:c0:2d:10:16:0d:e1:9e:a8:fd:ae:db:2a:57: 03:a4:19:5e:39:71:54:2f:69:5a:6f:97:d5:f4:d2: a1:a7:70:52:16:04:59:06:22:5a:7f:5a:89:f7:8a: df:2d:15:ba:c0:51:4c:2e:5a:d9:a1:58:24:be:61: 54:2e:3a:47:d0:c8:af:83:ed:2b:3b:b9:6f:07:b8: 39:97:48:65:68:ac:07:4e:c5:53:0a:2f:65:e1:99: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:18:99:1C:83:9A:33:87:D0:1C:71:D0:B2:56:97:2C:47:47:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5912c16-5a23-3e46-b568-53dd3d84728c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.154.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:13:8b:d9:59:be:1d:50:78:4d:eb:d2:de:5c:6d:39:ce:a4: d4:dd:cc:09:90:90:4e:9d:af:b3:d6:b2:d8:52:cf:fd:e9:32: b4:cf:b9:54:c1:0b:91:ba:0d:9b:70:33:ee:7e:b5:3e:40:c8: c8:2e:d3:80:cd:82:c0:f8:53:5d:40:41:2e:bc:e4:ad:8b:6a: b0:8a:fe:b2:1a:29:bf:5d:39:d0:96:fa:e9:2e:5b:4b:99:a7: f5:40:83:72:ba:0c:42:74:6b:5d:48:ed:a0:ff:81:1a:41:67: 9a:1b:a2:2e:32:1a:05:13:9d:39:77:5f:6a:9d:cc:2c:cc:26: 4a:ea:a8:e9:ed:e8:b5:5e:77:8a:82:77:b1:10:f9:67:27:43: a5:18:a8:e6:7f:12:52:f1:60:34:0c:f3:5c:b9:e8:d8:8d:96: 15:bf:22:0b:47:06:60:01:eb:0e:10:51:6d:28:f7:24:43:38: 77:7f:11:46:61:84:82:19:99:0c:be:64:30:e5:08:38:76:18: d2:d7:0a:42:36:6e:82:3e:51:5e:b7:42:1f:8b:61:9a:7e:5d: 3f:2b:e2:f8:e4:83:21:c6:48:bc:2d:a9:a8:80:01:c4:6a:52: ed:32:59:bb:48:3d:e5:e3:b7:04:d0:ac:cf:92:57:59:7a:4c: 92:cc:20:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd+QaI7hhHv5tBPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3NTYxMFoXDTI1MTExMzE4NTYxMFowLzEtMCsGA1UEAxMk MTg1N2MwZGUtNGVhMy00ZTAyLTg4MzItZGUwODg2MTlkNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC1kC04H7z+w0EQUy+swUjipNEl58Hfy9Bed KMWmgGkdrHx/MkMan0Hu3mY7iPPdXlIra8NRLJgBzTCRrMBNROf0MtzcZdNlWZyW faGNGBIWMdSYUvhN2r1kW1CFLuZfTs5iPzE04a24vpIhveERykrSeAwN12V+5quN 7KtigUCUTYvLbD3pCyMXIpmtQQTyrKKIyeBHMeCbV4Pve8hiPb0eXh9q/cAtEBYN 4Z6o/a7bKlcDpBleOXFUL2lab5fV9NKhp3BSFgRZBiJaf1qJ94rfLRW6wFFMLlrZ oVgkvmFULjpH0Mivg+0rO7lvB7g5l0hlaKwHTsVTCi9l4Zk/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa8GJkcg5ozh9AccdCyVpcsR0dBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTU5MTJjMTYtNWEyMy0z ZTQ2LWI1NjgtNTNkZDNkODQ3MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACETi9lZvh1QeE3r0t5cbTnOpNTdzAmQkE6dr7PWsthSz/3pMrTPuVTB C5G6DZtwM+5+tT5AyMgu04DNgsD4U11AQS685K2LarCK/rIaKb9dOdCW+ukuW0uZ p/VAg3K6DEJ0a11I7aD/gRpBZ5oboi4yGgUTnTl3X2qdzCzMJkrqqOnt6LVed4qC d7EQ+WcnQ6UYqOZ/ElLxYDQM81y56NiNlhW/IgtHBmAB6w4QUW0o9yRDOHd/EUZh hIIZmQy+ZDDlCDh2GNLXCkI2boI+UV63Qh+LYZp+XT8r4vjkgyHGSLwtqaiAAcRq Uu0yWbtIPeXjtwTQrM+SV1l6TJLMIGQ= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:34 2025 by rpki-client